HDF5 'H5S_hyper_make_spans' function null pointer dereference vulnerability

HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A security vulnerability exists in the 'H5Shypermakespans' function in the H5Shyper.c file in HDF5 version 1.10.2. A remote...

Design/Logic Flaw

A division by zero was discovered in H5Dbtreedecodekey in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

Design/Logic Flaw

A division by zero was discovered in H5Dchunkinit in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...

Information disclosure

A out of bounds read was discovered in H5VMmemcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack...

CVE-2018-11205

A out of bounds read was discovered in H5VMmemcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack...

CVE-2018-11202

CVE-2018-11202 affects HDF5 1.10.2 where a NULL pointer dereference in H5S_hyper_make_spans (H5Shyper.c) can lead to remote denial of service. The issue is addressed in later HDF5 updates; SUSE SUSE-SU-2024:3144-1 notes fixes for CVE-2018-11202 when upgrading hdf5 to 1.10.11. If you rely on affec...

CVE-2018-11205

CVE-2018-11205 describes an out-of-bounds read in H5VM_memcpyvv (H5VM.c) of the HDF5 1.10.2 library. The issue could enable a remote denial of service or information disclosure. The provided data identifies the affected component and the underlying cause (out-of-bounds read) and states the potent...

CVE-2018-11204

A NULL pointer dereference was discovered in H5Ochunkdeserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack...